2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-34794 | MEDIUM | 6.1 | 0.3% | Jun 3, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tainacan Tainacan ... |
| CVE-2024-34793 | MEDIUM | 5.9 | 0.3% | Jun 3, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kharim Toml... |
| CVE-2024-34791 | MEDIUM | 5.4 | 0.3% | Jun 3, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wpbean WPB ... |
| CVE-2024-34790 | MEDIUM | 5.9 | 0.3% | Jun 3, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hans van Ei... |
| CVE-2024-34789 | MEDIUM | 6.5 | 0.3% | Jun 3, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Hait Pos... |
| CVE-2024-34754 | MEDIUM | 5.3 | 0.3% | Jun 3, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in A WP Life Contact Form Widget.This issue aff... |
| CVE-2024-35635 | MEDIUM | 4.9 | 0.2% | Jun 3, 2024 | Server-Side Request Forgery (SSRF) vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from... |
| CVE-2024-35633 | MEDIUM | 4.9 | 0.3% | Jun 3, 2024 | Server-Side Request Forgery (SSRF) vulnerability in Creative Themes Blocksy Companion blocksy-companion.This issue affec... |
| CVE-2024-23664 | MEDIUM | 6.1 | 0.3% | Jun 3, 2024 | A URL redirection to untrusted site ('open redirect') in Fortinet FortiAuthenticator version 6.6.0, version 6.5.3 and be... |
| CVE-2024-21478 | MEDIUM | 5.5 | 0.1% | Jun 3, 2024 | transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA. |
| CVE-2024-35639 | MEDIUM | 5.9 | 0.3% | Jun 3, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webliberty Simple ... |
| CVE-2024-35638 | MEDIUM | 4.3 | 0.2% | Jun 3, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in JumpDEMAND Inc. ActiveDEMAND.This issue affects ActiveDEMAND: from n/... |
| CVE-2024-35637 | MEDIUM | 4.4 | 0.2% | Jun 3, 2024 | Server-Side Request Forgery (SSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin... |
| CVE-2024-36964 | MEDIUM | 5.5 | 0.2% | Jun 3, 2024 | In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2... |
| CVE-2024-36962 | MEDIUM | 5.5 | 0.2% | Jun 3, 2024 | In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Queue RX packets in IRQ handler instea... |
| CVE-2024-36961 | MEDIUM | 5.5 | 0.1% | Jun 3, 2024 | In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Fix two locking issues with therma... |
| CVE-2024-35640 | MEDIUM | 5.9 | 0.3% | Jun 3, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Tomas Corde... |
| CVE-2024-31493 | MEDIUM | 6.5 | 0.5% | Jun 3, 2024 | An improper removal of sensitive information before storage or transfer vulnerability [CWE-212] in FortiSOAR version 7.3... |
| CVE-2024-23107 | MEDIUM | 5.5 | 0.2% | Jun 3, 2024 | An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiWeb version 7.4.0, version... |
| CVE-2024-35643 | MEDIUM | 5.9 | 0.3% | Jun 3, 2024 | Cross Site Scripting (XSS) vulnerability in Xabier Miranda WP Back Button allows Stored XSS.This issue affects WP Back B... |
| CVE-2024-35642 | MEDIUM | 5.9 | 0.3% | Jun 3, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bryan Hadaw... |
| CVE-2024-35641 | MEDIUM | 5.9 | 0.3% | Jun 3, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in GregRoss Ju... |
| CVE-2024-37031 | MEDIUM | 6.1 | 0.3% | Jun 3, 2024 | The Active Admin (aka activeadmin) framework before 3.2.2 for Ruby on Rails allows stored XSS in certain situations wher... |
| CVE-2024-20075 | MEDIUM | 6.7 | 0.1% | Jun 3, 2024 | In eemgpu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of... |
| CVE-2024-20074 | MEDIUM | 6.6 | 0.2% | Jun 3, 2024 | In dmc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now